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WS-Security provides basic means to secure SOAP traffic, one envelope at a 
time. For typical web services, however, using WS-Security independently for 
each message is rather inefficient; besides, it is often important to secure the 
integrity of a whole ... 
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Web Services are an important series of standards for adding semantics to web- 
based and XML-based communication. For analyzing the security of Web 
Services protocols composed of these standards, it is tempting to exploit their 
similarity to traditional ... 
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Over the last few years, many identity management schemes, frameworks and 
system specifications have been proposed; however these various schemes and 
frameworks are typically not interoperable. In this paper we propose an 
approach to enable interoperation ... 
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The goal of supporting Single Sign-On to the Web has proven elusive. A number 
of solutions have been proposed -- and some have even been deployed -- but 
the capability remains unavailable to most users and the solutions deployed 
raise concerns for both ... 
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A serious challenge for seamless roaming between independent wireless LANs 
(WLANs) is how best to confederate the various WLAN service providers, each 
having different trust relationships with individuals and each supporting their 
own authentication ... 
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Identity Federation enables managing a single User's multiple Identities across 
administrative domains. Instead of forcing a single Identity for the User, it 
leverages trust between Service Providers to share User Identity information viz. 
Authentication, ... 
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The standard solution for user authentication on the Web is to establish a TLS- 
based secure channel in server authenticated mode and run a protocol on top of 
TLS where the user enters a password in an HTML form. However, as many 
studies point out, the ... 
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Multidomain application environments where distributed domains interoperate 
with each other is a reality in Web-services-based infrastructures. Collaboration 
enables domains to effectively share resources; however, it introduces several 
security and ... 
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As the Web is increasingly used as a platform for heterogeneous applications, we 
are faced with new requirements to authentication, authorization and identity 
management. Modern architectures have to control access not only to single, 
isolated systems, ... 
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Traditional access control mechanisms rely on a reference monitor to mediate 
access to protected resources. Reference monitors are inherently centralized and 
existing attempts to distribute the functionality of the reference monitor suffer 
from problems ... 
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Federated Identity Management (FldM) is being applied to Services Oriented 
Architecture (SOA) deployments that cross enterprise boundaries. Though 
federation is essential in order to address the distributed nature of SOA, these 
FldM solutions have been ... 
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Current developments in IT point towards the formation of loosely coupled 
enterprises, often referred to as virtual enterprises. These enterprises require 
both secure and flexible collaboration between unrelated information systems. 
Web services technology ... 
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The goal of this paper is to study secure and usable methods for providing user 
input to a website. Three principles define security for us: certification, 
awareness, and privacy. Four principles define usability: contextual awareness, 
semantic ... 
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Today, the Web is increasingly used as a platform for distributed services, which 
transcend organizational boundaries to form federated applications. 
Consequently, there is a growing interest in the architectural aspect of Web- 
based systems, i.e. the ... 
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The SOA approach is a very popular choice today for the implementation of 
distributed systems. The use of SOA or more specifically the Web services 
technology is an important architecture decision. An architect should understand 
how different quality ... 
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The Internet enables global sharing of data across organizational boundaries. 
Distributed file systems facilitate data sharing in the form of remote file access. 
However, traditional access control mechanisms used in distributed file systems 
are intended ... 
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We address the problem of securing sequences of SOAP messages exchanged 
between web services and their clients. The WS-Security standard defines basic 
mechanisms to secure SOAP traffic, one message at a time. For typical web 
services, however, using ... 
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Federated identity management is sometimes criticized as exacerbating the 
problem of online identity theft, based as it is on the idea of connecting together 
previously separate islands of identity information. This paper explores this 
conjecture, and ... 
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Since the dawn of computing, operating systems and applications have used 
many schemes to identify and authenticate entities accessing resources within 
computers. While the technologies and schemes have varied, there appears to 
have been little attempt ... 
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Currently, influential industrial players are in the process of realizing identity 
federation, in particular the authentication of browser users across 
administrative domains. WS- Federation is a joint protocol framework for Web 
Services clients and browser ... 
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